A) My biggest problem, even a noob like me managed to exploit that by posting HTML. How can i make it so that html will just be converted to text if its posted? Like i posted a meta refresh tag just to test it, and its messed, but i can fix that, i just want to stop people doing it.